online.apsu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:14:ec:e9:72:a2:ba:6a:d1:92:12:13:55:67:a3:bd:f0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=online.apsu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:14:ec:e9:72:a2:ba:6a:d1:92:12:13:55:67:a3:bd:f0
Serial Number (int): 337587922662429078406141611590311177600496
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:a0:67:7c:a2:76:83:f8:a1:e9:ca:cf:b7:c3:9c:80:4c:36:29:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:ba:bc:ac:db:eb:16:7f:d1:be:18:d1:5e:32:1c:35:97:72:59:94
Fingerprint (sha256): 34:4f:c8:54:5e:0c:ba:26:60:97:46:ce:fa:dc:39:15:ad:15:62:6e:2e:fc:17:4d:68:79:5a:b2:5e:78:08:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate online.apsu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online.apsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.apsu.edu
www.online.apsu.edu

Other certificates including the domain name apsu.edu

(limited to 100 certificates)
iiiserver.lib.apsu.edu
online.apsu.edu
apbrtn3.apsu.edu
*.ezproxy.lib.apsu.edu
library.apsu.edu
govstech.apsu.edu
library.apsu.edu
*.ezproxy.lib.apsu.edu
online.apsu.edu
apnsgis1.apsu.edu
apnsgis1.apsu.edu
apmyise2.apsu.edu
govstech.apsu.edu
fed.apsu.edu
*.apsu.edu
mail.apsu.edu
online.apsu.edu
www.apsu.edu
library.apsu.edu
libguides.apsu.edu
signmeup.apsu.edu
*.apsu.edu
aspire.apsu.edu
apdwasp.apsu.edu
pwmanage.apsu.edu
elearn.apsu.edu
epay.apsu.edu
*.ezproxy.lib.apsu.edu
apsu.edu
apnsgis1.apsu.edu
apmybeis5.apsu.edu
catalog.apsu.edu
apbrss4.apsu.edu
online.apsu.edu
online.apsu.edu
aspire.apsu.edu
apmybmgr1.apsu.edu
apnsgis1.apsu.edu
illiad.apsu.edu
apsugis.com
apmybbapp.apsu.edu
libguides.apsu.edu
online.apsu.edu
elearn.apsu.edu
online.apsu.edu
epay.apsu.edu
appercsp.apsu.edu
recreation.apsu.edu
apnsgis1.apsu.edu
aspire.apsu.edu
apbrss4.apsu.edu
gis.apsu.edu
apnsgis1.apsu.edu
apmraceweb.apsu.edu
mail.apsu.edu
apmyise.apsu.edu
apbrvacs1.apsu.edu
recreation.apsu.edu
elearn.apsu.edu
apbrarg2.apsu.edu
www.apsu.edu
apnsgis1.apsu.edu
apmyk1000.apsu.edu
appercst.apsu.edu
myprintcenter.apsu.edu
*.apsu.edu
apsu.edu
online.apsu.edu
apnsgis1.apsu.edu
fed.apsu.edu
apnsgis1.apsu.edu
apbrimv2.apsu.edu
gp.apsu.edu
apnsgis1.apsu.edu
www.apsu.edu
*.ezproxy.lib.apsu.edu
apbrarg2.apsu.edu
apmrde1.apsu.edu
*.apsu.edu
myprintcenter.apsu.edu
apmyise.apsu.edu
illiad.lib.apsu.edu
apnsgis1.apsu.edu
elearn.apsu.edu
apmypsg1.apsu.edu
apnsgis2.apsu.edu
*.apsu.edu
illiad.apsu.edu
gp.apsu.edu
online.apsu.edu
myprintcenter.apsu.edu
apbrss5.apsu.edu
mail.apsu.edu
iiiserver.lib.apsu.edu
apbrwf5.apsu.edu
gp.apsu.edu
apmybmgr1.apsu.edu
apmyk1000.apsu.edu
govstech.apsu.edu
gp.apsu.edu

Certificate

The complete raw certificate details for online.apsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a7N72gVjw0q4CGw0lqA
Xp7mj/yAjKR37kOlNSJGaStcN+x6i7qsWBuirG537OMTP4YEC5VQguzeFh4neQ5A
ajcCgw2cbNkuY3nRI4eP2XXiZFWLxpAHhtFlwTb+WAGxleLYniqNr/1ptil4emxB
M4UL2CxlsEjoFzQLZ0a9hTYMFTJCEys0CjuEHTzNLXOhdVexCHLsm2/LTnUDyxlR
xbBr8lc5qdS3Du0z2cEB1X4CZJqlkfgFW/gkUg+nmL86ntHSI7jfC0rUNFFj4WDW
Oq5umpTNVu6GqmtH0eCHxfzcNud102+Xk/KWD3hjxjBJF8/cz4KFTyQjZK3NA1M8
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337587922662429078406141611590311177600496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 13:00:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 13:00:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online.apsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27479911456881398313976440700881192851799963245697068458714564640774045727928767712305105948447568111108051259197799120753939103208078790526462311070220571538003937187276549039480953112452396420550727650543165473403014980883384051891455852895811751568887523139431252448982706214212927905827571117899040137374858666785067573973913474460379002198537946668085464862832695390817531284897442592961980651681269643795845123295140946890156039465681564295969657062468903776493567456137748261924824216809181010297416323144779603149012893509069797419392191059387708985223342819108617569373596198362962100552546106056197648104537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08a0677ca27683f8a1e9cacfb7c39c804c36297f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.apsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.apsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016557a2f6aa0000040300483046022100a58e6130f026f04bfffe6b80a9a8dd3b3c4599ad6a256f8c349a0dce43da00bf022100fc315044702d7418beef37162e965afd2a6410bcc29faf5bb6108c1dd875f580007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016557a2f864000004030046304402206b04b038ac3974954f7354fcab4fcd9cf7546e1fbafd63082175cd1da60c28d4022045eafd8333949754082de21391e2c61dc0129be4a350f1a8854619a6eded647e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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